CONTENTS
Preface
11
Audience
1-11
Organization
1-12
Conventions 1-13
Notes, Cautions, and Timesavers
Command Conventions 1-13
Related Documents
1-13
1-14
Obtaining Documentation 1-14
Cisco.com 1-14
Documentation DVD 1-15
Ordering Documentation 1-15
Documentation Feedback
1-15
Cisco Product Security Overview 1-15
Reporting Security Problems in Cisco Products
1-16
Obtaining Technical Assistance 1-16
Cisco Technical Support Website 1-16
Submitting a Service Request 1-17
Definitions of Service Request Severity 1-17
Obtaining Additional Publications and Information
PART
Getting Started
1
CHAPTER
1-18
1
Basic Router Configuration
Interface Port Labels
1-1
1-1
Viewing the Default Configuration
1-2
Information Needed for Configuration
1-4
Configuring Basic Parameters 1-5
Configure Global Parameters 1-6
Configure Fast Ethernet LAN Interfaces 1-6
Configure WAN Interfaces 1-7
Configure the Fast Ethernet WAN Interface
Configure the ATM WAN Interface 1-8
1-7
Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide
OL-6426-02
3
Contents
Configure the Wireless Interface 1-9
Configuring a Loopback Interface 1-9
Configuration Example 1-9
Verifying Your Configuration 1-10
Configuring Command-Line Access to the Router
Configuration Example 1-12
1-10
Configuring Static Routes 1-12
Configuration Example 1-13
Verifying Your Configuration 1-13
Configuring Dynamic Routes 1-13
Configuring RIP 1-14
Configuration Example 1-15
Verifying Your Configuration 1-15
Configuring Enhanced IGRP 1-15
Configuration Example 1-16
Verifying Your Configuration 1-16
PART
Configuring Your Router for Ethernet and DSL Access
2
CHAPTER
2
Sample Network Deployments
CHAPTER
3
Configuring PPP over Ethernet with NAT
2-1
3-1
Configure the Virtual Private Dialup Network Group Number
Configure the Fast Ethernet WAN Interfaces
Configure the Dialer Interface
Configuration Example 3-9
Verifying Your Configuration
4
3-7
3-10
Configuring PPP over ATM with NAT
Configure the Dialer Interface
3-3
3-5
Configure Network Address Translation
CHAPTER
3-2
4-1
4-3
Configure the ATM WAN Interface
Configure DSL Signaling Protocol
Configuring ADSL 4-6
Verify the Configuration
Configuring SHDSL 4-7
Verify the Configuration
4-5
4-6
4-7
4-8
Configure Network Address Translation
4-9
Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide
4
OL-6426-02
Contents
Configuration Example 4-11
Verifying Your Configuration
CHAPTER
5
4-12
Configuring a LAN with DHCP and VLANs
Configure DHCP 5-2
Configuration Example 5-3
Verify Your DHCP Configuration
5-4
Configure VLANs 5-5
Verify Your VLAN Configuration
5-5
5-1
Switch Port Configurations 5-7
VLAN Trunking Protocol (VTP) 5-8
802.1x Authentication 5-8
Layer 2 Interfaces 5-9
MAC Table Manipulation 5-9
Maximum Switched Virtual Interfaces (SVIs)
Switched Port Analyzer (SPAN) 5-9
IP Multicast Switching 5-9
Per-Port Storm Control 5-10
Fallback Bridging 5-10
Separate Voice and Data Subnets 5-10
IGMP Snooping 5-10
CHAPTER
6
5-9
Configuring a VPN Using Easy VPN and an IPSec Tunnel
Configure the IKE Policy
6-3
Configure Group Policy Information
6-4
Apply Mode Configuration to the Crypto Map
Enable Policy Lookup
6-5
6-6
Configure IPSec Transforms and Protocols
6-6
Configure the IPSec Crypto Method and Parameters
Apply the Crypto Map to the Physical Interface
Create an Easy VPN Remote Configuration
Verifying Your Easy VPN Configuration
Configuration Example
CHAPTER
7
6-1
6-7
6-8
6-9
6-10
6-10
Configuring VPNs Using an IPSec Tunnel and Generic Routing Encapsulation
Configure a VPN 7-3
Configure the IKE Policy 7-3
Configure Group Policy Information
7-1
7-4
Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide
OL-6426-02
5
Contents
Enable Policy Lookup 7-5
Configure IPSec Transforms and Protocols 7-6
Configure the IPSec Crypto Method and Parameters 7-7
Apply the Crypto Map to the Physical Interface 7-8
CHAPTER
8
Configure a GRE Tunnel
7-8
Configuration Example
7-10
Configuring a Simple Firewall
Configure Access Lists
8-1
8-3
Configure Inspection Rules
8-3
Apply Access Lists and Inspection Rules to Interfaces
Configuration Example
CHAPTER
9
8-5
Configuring a Wireless LAN Connection
Configure the Root Radio Station
Configure Bridging on VLANs
Configuration Example
9-5
9-6
9-7
CHAPTER
10
Sample Configuration
CHAPTER
11
Additional Configuration Options
10-1
11-1
Configuring Additional Features and Troubleshooting
2
CHAPTER
9-1
9-3
Configure Radio Station Subinterfaces
PART
12
Configuring Security Features
12-1
Authentication, Authorization, and Accounting
Configuring AutoSecure
Configuring a CBAC Firewall
13
12-3
12-3
Configuring Cisco IOS Firewall IDS
Configuring VPNs
12-1
12-2
Configuring Access Lists 12-2
Access Groups 12-3
Guidelines for Creating Access Groups
CHAPTER
8-4
12-4
12-4
Configuring Dial Backup and Remote Management
Dial Backup Feature Activation Methods
13-1
13-1
Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide
6
OL-6426-02
Contents
Backup Interfaces 13-1
Configuring Backup Interfaces 13-2
Floating Static Routes 13-2
Configuring Floating Static Routes 13-3
Dialer Watch 13-4
Configuring Dialer Watch 13-4
Dial Backup Feature Limitations 13-5
Configuration Example 13-6
Configuring Dial Backup and Remote Management Through the ISDN S/T Port
Configure ISDN Settings 13-9
Configure the Aggregator and ISDN Peer Router 13-12
Configuring Dial Backup and Remote Management Through a V.92 Modem
Asynchronous Interface Configuration 13-13
Line Configuration 13-15
CHAPTER
14
Troubleshooting
Getting Started
13-9
13-13
14-1
14-1
Before Contacting Cisco or Your Reseller
ADSL Troubleshooting
SHDSL Troubleshooting
14-1
14-2
14-2
PortFast Troubleshooting
14-2
ATM Troubleshooting Commands 14-3
ping atm interface Command 14-3
show interface Command 14-3
show atm interface Command 14-5
debug atm Commands 14-6
Guidelines for Using Debug Commands
debug atm errors Command 14-6
debug atm events Command 14-7
debug atm packet Command 14-8
Software Upgrade Methods
14-6
14-9
Recovering a Lost Password 14-9
Change the Configuration Register 14-10
Reset the Router 14-11
Reset the Password and Save Your Changes 14-12
Reset the Configuration Register Value 14-12
Managing Your Router with SDM
14-13
Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide
OL-6426-02
7
Contents
PART
Reference Information
3
APPENDIX
A
Cisco IOS Software Basic Skills
A-1
Configuring the Router from a PC
A-1
Understanding Command Modes
A-2
Getting Help
A-4
Enable Secret Passwords and Enable Passwords
Entering Global Configuration Mode
A-5
Using Commands A-6
Abbreviating Commands A-6
Undoing Commands A-6
Command-Line Error Messages
A-6
Saving Configuration Changes
Summary
B
Concepts
B-1
ADSL
B-1
SHDSL
A-7
A-7
Where to Go Next
APPENDIX
A-5
A-7
B-2
Network Protocols
IP B-2
B-2
Routing Protocol Options B-2
RIP B-3
Enhanced IGRP B-3
PPP Authentication Protocols
PAP B-4
CHAP B-4
TACACS+
B-3
B-5
Network Interfaces
Ethernet B-5
ATM B-5
PVC B-6
Dialer Interface
B-5
B-6
Dial Backup B-6
Backup Interface B-6
Floating Static Routes B-7
Dialer Watch B-7
Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide
8
OL-6426-02
Contents
NAT
B-7
Easy IP (Phase 1)
B-8
Easy IP (Phase 2)
B-8
QoS
B-9
IP Precedence B-9
PPP Fragmentation and Interleaving
CBWFQ B-10
RSVP B-10
Low Latency Queuing B-10
Access Lists
APPENDIX
C
ROM Monitor
B-9
B-11
C-1
Entering the ROM Monitor
ROM Monitor Commands
Command Descriptions
C-1
C-2
C-3
Disaster Recovery with TFTP Download C-3
TFTP Download Command Variables C-3
Required Variables C-4
Optional Variables C-4
Using the TFTP Download Command C-5
Configuration Register C-6
Changing the Configuration Register Manually C-6
Changing the Configuration Register Using Prompts C-6
Console Download C-7
Command Description
Error Reporting C-8
Debug Commands
APPENDIX
D
C-7
C-8
Exiting the ROM Monitor
C-9
Common Port Assignments
D-1
INDEX
Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide
OL-6426-02
9
Contents
Cisco 1800 Series Integrated Services Routers (Fixed) Software Configuration Guide
10
OL-6426-02